emotet | d5ad55df10fb9feba407a90a8232eea126379a97443b7444a154dafac6bbbc6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5ad55df10fb9feba407a90a8232eea126379a97443b7444a154dafac6bbbc6b
Size

136KB
MD5

f995c8f780f1f2eabf1ca20716f01dfd
SHA1

ae226f5e7e891ecea60ebf9a8dceaa99d0cce327
SHA256

d5ad55df10fb9feba407a90a8232eea126379a97443b7444a154dafac6bbbc6b
SHA512

b823487a4a194f25b1b6885a449344d6309943589f97b7c35c140a70ce1d2bb89383e31e224169fc52eb5410cbac9b097c9a75ba774dec9ff33cf64c03111fb4
SSDEEP

3072:xARnqqL0LBU6mSL7XSkx6bTJmSeL91PQaUci3cV6949:x0n/0bHAngxh1PgM

Score

10^/10

emotet

Malware Config

Signatures

Emotet family
emotet

Files

d5ad55df10fb9feba407a90a8232eea126379a97443b7444a154dafac6bbbc6b
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ